Re: [討論] 華為 P30 PRO 傳與中國政府網站連線?

作者: kouta (Kk)   2019-04-23 19:05:59
後續原討論者在 github 的更新:
https://github.com/pe3zx/huawei-block-list
reddit 在 1 小時前發了後續文:
www.reddit.com/r/netsec/comments/bgeevn/analysis_of_false_positive_on_beiangovcn_requests/
縮:http://bit.ly/2KVMcY7
文章報導:
onties.com/thailand/against-the-huawei-p30-pro-without-link-to-china-the-point-is-a-misunderstanding-in-testing/
縮:https://onties.com/?p=370969
看來華為泰國跟就他很快聯繫。
以下是 github 的部份內容
Statement
As a solely maintainer for this project, please accept my deepest apologies for mistakes which cause misunderstadning for Huawei brand and customers. The fact that Huawei P30 Pro initated connections to beian.gov.cn is not true.
I still maintain this project for my own benefits. Please use it at your own risk. Please see more info in next section, on an anaylsis of beian.gov.cn
Explanation for An Existing of beian.gov.cn
Please see my statement above
Due to my responsibility for this hobby research to prevent distributing misleading or misunderstanding information, and suggestions made by other researchers to discover more findings or correct me if I did something wrong. As an intention for this research I told everyone in Thai, we couldn't and shouldn't make a conclusion in this moment until we can see everything clearly.
The requests to beian.gov.cn were happened during testing, originate from baidu.com. Please see this analysis report for more info
Timeline
April 22, 2019: Received a message from Huawei Thailand for supporting. They will try to coordinate with Huawei HQ.
April 23, 2019:
Sent more information about an analysis of www.beian.gov.cn to Huawei Thailand
Updated code and lists to support whitelist domain names and exclude false positive domain names
Updated posts to 2600 Thailand, /r/netsec on the thread and other media
Huawei Thailand ackownledged new update on false positive
Description
Domain names on master.txt are captured DNS requests from Huawei P30 Pro purchased in Thailand. All domains located in China and/or has an IP address within China's ASN. The device hasn't configured with Huawei services, including Huawei ID or any Hi services.
Please note that:
The block list may includes test domain names, baidu.com and qq.com.
By relying on techniques in update.py to verify location domain names. Some domain names such as tencent-cloud.net and hwcdn.net are not flagged. I will find a way to fix this issue later.
作者: rhapsodyepic (怎麼最後是.......)   2019-04-23 19:28:00
老實說,如果改為傳回一間號稱99%員工持股的軍方色彩公司,會比較安心嗎?
作者: DANTEINFERNO (DANTE)   2019-04-23 19:34:00
你是不是還沒搞懂ICP? reddit的回應就寫了那個網址是幹嘛的了不是嗎?如果你已經知道備案這東西的話 那麼上一篇的內容 和最原始那篇的48樓應該就可以理解了吧?我是建議啦 reddit上 甚至這篇最原始的文都有人解釋了 這些東西不標出來 實在是沒有中立可言 不彷貼出來?你應該也知道 只看文章甚至標題就以為已經知道所有事的人很多 就像你那篇文會爆一樣 所以如果可以在你的文章本體告訴大家現在事實是什麼 會比較好

Links booklink

Contact Us: admin [ a t ] ucptt.com